<style>p {margin:0 0 14px 0}.default-font-1702787437832 {font-size: 14px;font-family: 宋体, arial, Verdana, sans-serif}</style><div class="default-font-1702787437832"><p style="font-size:14px;">
Sorry for the mixed format. I updated the post here.
</p>
<p style="font-size:14px;">
<br>
</p>
<p style="font-size:14px;">
<span style="text-wrap:nowrap;">Hi, I have a bind9 service running on the server, and some views configured, but I found a zone file got updated unexpected when I made some resolve changes.</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">Here is parts of the original contents of the updated zone file.</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">$TTL 86400 ; 1 day</span><br>
<span style="text-wrap:nowrap;">@ IN SOA pridns.ynu.edu.cn. root.pridns.ynu.edu.cn. (</span><br>
<span style="text-wrap:nowrap;"> 2019091901 ; serial number</span><br>
<span style="text-wrap:nowrap;"> 10800 ; Refresh interval, every 3 hours</span><br>
<span style="text-wrap:nowrap;"> 3600 ; Retry interval, every 30 minutes </span><br>
<span style="text-wrap:nowrap;"> 604800 ; Expire after 1 week</span><br>
<span style="text-wrap:nowrap;"> 86400 ) ; Minimum TTL of 1 day</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">$INCLUDE /etc/named.data/db.ynu.edu.cn.common</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">; RR of type A</span><br>
<span style="text-wrap:nowrap;">; </span><br>
<span style="text-wrap:nowrap;">lb-http-jz IN A 113.55.14.52</span><br>
<span style="text-wrap:nowrap;">; </span><br>
<span style="text-wrap:nowrap;">vpn1 10800 IN A 192.168.208.3</span><br>
<span style="text-wrap:nowrap;">ynucdn 600 IN A 202.203.208.4</span><br>
<span style="text-wrap:nowrap;">......</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">And this is the auto updated parts of that file.</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">$ORIGIN .</span><br>
<span style="text-wrap:nowrap;">$TTL 86400 ; 1 day</span><br>
<span style="text-wrap:nowrap;">ynu.edu.cn IN SOA pridns.ynu.edu.cn. root.pridns.ynu.edu.cn. (</span><br>
<span style="text-wrap:nowrap;"> 2019091903 ; serial</span><br>
<span style="text-wrap:nowrap;"> 10800 ; refresh (3 hours)</span><br>
<span style="text-wrap:nowrap;"> 3600 ; retry (1 hour)</span><br>
<span style="text-wrap:nowrap;"> 604800 ; expire (1 week)</span><br>
<span style="text-wrap:nowrap;"> 86400 ; minimum (1 day)</span><br>
<span style="text-wrap:nowrap;"> )</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">$ORIGIN ynu.edu.cn.</span><br>
<span style="text-wrap:nowrap;">100 CNAME lb-http</span><br>
<span style="text-wrap:nowrap;">65031141 CNAME www.itc</span><br>
<span style="text-wrap:nowrap;">$ORIGIN 65031141.ynu.edu.cn.</span><br>
<span style="text-wrap:nowrap;">ip-watcher A 113.55.13.114</span><br>
<span style="text-wrap:nowrap;">kibana CNAME lb-http.ynu.edu.cn.</span><br>
<span style="text-wrap:nowrap;">portainer CNAME lb-http.ynu.edu.cn.</span><br>
<span style="text-wrap:nowrap;">$ORIGIN ynu.edu.cn.</span><br>
<span style="text-wrap:nowrap;">_cdnauth TXT "2023060823081361d03c617f075ac05df69f6309bd9aa6"</span><br>
<span style="text-wrap:nowrap;">access A 113.55.0.80</span><br>
<span style="text-wrap:nowrap;">......</span><br>
<span style="text-wrap:nowrap;">The update contents contain some $ORIGIN seems to produced via named process.</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">The related pieces of named.conf configurations is:</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">......</span><br>
<span style="text-wrap:nowrap;">view "INTRANET"{</span><br>
<span style="text-wrap:nowrap;"> match-clients { INTRANET_ACL;};</span><br>
<span style="text-wrap:nowrap;"> recursion yes;</span><br>
<span style="text-wrap:nowrap;"> include "/etc/named.common.zones.conf";</span><br>
<span style="text-wrap:nowrap;"> zone "ynu.edu.cn" in {</span><br>
<span style="text-wrap:nowrap;"> type master;</span><br>
<span style="text-wrap:nowrap;"> file "db.ynu.edu.cn.intranet";</span><br>
<span style="text-wrap:nowrap;"> };</span><br>
<span style="text-wrap:nowrap;">};</span><br>
<span style="text-wrap:nowrap;">......</span>
</p>
<p style="font-size:14px;">
<span style="text-wrap:nowrap;"><br>
</span><span style="text-wrap:nowrap;">And I found some general logs maybe provide some clues.</span><span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.460 general: debug 1: zone_timer: zone ynu.edu.cn/IN/INTRANET: enter</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.460 general: debug 1: zone_maintenance: zone ynu.edu.cn/IN/INTRANET: enter</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.460 general: debug 1: zone_dump: zone ynu.edu.cn/IN/INTRANET: enter</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.460 general: debug 1: zone_settimer: zone ynu.edu.cn/IN/INTRANET: enter</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.460 general: debug 1: zone_gotwritehandle: zone ynu.edu.cn/IN/INTRANET: enter</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.460 general: debug 1: dumptostreaminc(0x7efe0d938010) new nodes -> 212</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.461 general: debug 1: dumptostreaminc(0x7efe0d938010) new nodes -> 310</span><br>
<span style="text-wrap:nowrap;">14-Dec-2023 14:39:25.464 general: debug 1: dump_done: zone ynu.edu.cn/IN/INTRANET: enter</span><br>
<span style="text-wrap:nowrap;">I did not configure master/slave mode of bind9. And I serached the sources of bind9, but failed to find some keywords like zone_timer or zone_gotwritehandle.</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">I have stucked on this strange problem for a few days.</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">I found this zone file got updated in about 15 minutes when I made changes or restarted named, and this behavior seems match the docs bind9.readthedocs.io/en/latest/chapter6.html#dynamic-update, but I can confirm I DO NOT configure allow-update or update-policy. I even add "allow-update {none;}; // no DDNS by default" in the zone block of the problematic view. Is there any chances this configuration comes from other config file or named build options?</span><br>
<span style="text-wrap:nowrap;"><br>
</span><br>
<span style="text-wrap:nowrap;">I have also posted on <a href="https://stackoverflow.com/questions/77658310/zone-file-got-updated-via-named-process-unexpected" target="_blank">stackoverflow</a>, but without any response. </span><br>
<br>
</p>
<br>
2023-12-17 12:04:18 <a href="mailto:"刘东华" <liudonghua@ynu.edu.cn>" data-ke-src="mailto:"刘东华" <liudonghua@ynu.edu.cn>" style="font-size:14px;">"刘东华" <liudonghua@ynu.edu.cn></a> 写道:
<blockquote name="replyContent" style="font-size:14px;padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:1px solid #CCCCCC;">
<div>
<style>p {margin:0 0 14px 0}.default-font-1702785858569 {font-size: 14px;font-family: 宋体, arial, Verdana, sans-serif}</style>
<div class="default-font-1702785858569">
<p data-sourcepos="1:1-1:151" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
Hi, I have a bind9 service running on the server, and some views configured, but I found a zone file got updated unexpected when I made some resolve changes.
</p>
<p data-sourcepos="3:1-3:64" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
Here is parts of the original contents of the updated zone file.
</p>
<div class="gl-relative markdown-code-block js-markdown-code" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
<pre data-sourcepos="5:1-25:3" class="code highlight js-syntax-highlight language-plaintext white" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><code style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$TTL 86400 ; 1 day</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">@ IN SOA pridns.ynu.edu.cn. root.pridns.ynu.edu.cn. (</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 2019091901 ; serial number</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 10800 ; Refresh interval, every 3 hours</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 3600 ; Retry interval, every 30 minutes </span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 604800 ; Expire after 1 week</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 86400 ) ; Minimum TTL of 1 day</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$INCLUDE /etc/named.data/db.ynu.edu.cn.common</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">; RR of type A</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">; </span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">lb-http-jz IN A 113.55.14.52</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">; </span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">vpn1 10800 IN A 192.168.208.3</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">ynucdn 600 IN A 202.203.208.4</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">......</span> </code></pre>
<button type="button" class="btn btn-default btn-md gl-button btn-icon has-tooltip" data-title="复制到剪贴板" data-clipboard-target="pre#code-52" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;border-width:0px;border-style:solid;border-color:#E5E7EB;font-family:inherit;font-size:unset;line-height:unset;margin:0px;appearance:button;background-image:unset;background-position:unset;background-size:unset;background-repeat:unset;background-attachment:unset;background-origin:unset;background-clip:unset;cursor:pointer;padding:0px;height:auto;display:unset;border-radius:unset;text-align:unset;user-select:none;"></button>
</div>
<p data-sourcepos="27:1-27:48" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
And this is the auto updated parts of that file.
</p>
<div class="gl-relative markdown-code-block js-markdown-code" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
<pre data-sourcepos="29:1-51:3" class="code highlight js-syntax-highlight language-plaintext white" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><code style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$ORIGIN .</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$TTL 86400 ; 1 day</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">ynu.edu.cn IN SOA pridns.ynu.edu.cn. root.pridns.ynu.edu.cn. (</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 2019091903 ; serial</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 10800 ; refresh (3 hours)</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 3600 ; retry (1 hour)</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 604800 ; expire (1 week)</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> 86400 ; minimum (1 day)</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> )</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$ORIGIN ynu.edu.cn.</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">100 CNAME lb-http</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">65031141 CNAME www.itc</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$ORIGIN 65031141.ynu.edu.cn.</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">ip-watcher A 113.55.13.114</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">kibana CNAME lb-http.ynu.edu.cn.</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">portainer CNAME lb-http.ynu.edu.cn.</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">$ORIGIN ynu.edu.cn.</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">_cdnauth TXT "2023060823081361d03c617f075ac05df69f6309bd9aa6"</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">access A 113.55.0.80</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">......</span></code></pre>
<button type="button" class="btn btn-default btn-md gl-button btn-icon has-tooltip" data-title="复制到剪贴板" data-clipboard-target="pre#code-53" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;border-width:0px;border-style:solid;border-color:#E5E7EB;font-family:inherit;font-size:unset;line-height:unset;margin:0px;appearance:button;background-image:unset;background-position:unset;background-size:unset;background-repeat:unset;background-attachment:unset;background-origin:unset;background-clip:unset;cursor:pointer;padding:0px;height:auto;display:unset;border-radius:unset;text-align:unset;user-select:none;"></button>
</div>
<p data-sourcepos="53:1-53:81" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
The update contents contain some <code style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;">$ORIGIN</code> seems to produced via <code style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;">named</code> process.
</p>
<p data-sourcepos="55:1-55:51" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
The related pieces of named.conf configurations is:
</p>
<div class="gl-relative markdown-code-block js-markdown-code" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
<pre data-sourcepos="57:1-69:3" class="code highlight js-syntax-highlight language-plaintext white" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><code style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">......</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">view "INTRANET"{</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> match-clients { INTRANET_ACL;};</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> recursion yes;</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> include "/etc/named.common.zones.conf";</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> zone "ynu.edu.cn" in {</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> type master;</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> file "db.ynu.edu.cn.intranet";</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;"> };</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">};</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">......</span></code></pre>
<button type="button" class="btn btn-default btn-md gl-button btn-icon has-tooltip" data-title="复制到剪贴板" data-clipboard-target="pre#code-54" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;border-width:0px;border-style:solid;border-color:#E5E7EB;font-family:inherit;font-size:unset;line-height:unset;margin:0px;appearance:button;background-image:unset;background-position:unset;background-size:unset;background-repeat:unset;background-attachment:unset;background-origin:unset;background-clip:unset;cursor:pointer;padding:0px;height:auto;display:unset;border-radius:unset;text-align:unset;user-select:none;"></button>
</div>
<p data-sourcepos="71:1-71:55" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
And I found some general logs maybe provide some clues.
</p>
<div class="gl-relative markdown-code-block js-markdown-code" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
<pre data-sourcepos="73:1-82:3" class="code highlight js-syntax-highlight language-plaintext white" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><code style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;font-size:1em;"><span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.460 general: debug 1: zone_timer: zone ynu.edu.cn/IN/INTRANET: enter</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.460 general: debug 1: zone_maintenance: zone ynu.edu.cn/IN/INTRANET: enter</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.460 general: debug 1: zone_dump: zone ynu.edu.cn/IN/INTRANET: enter</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.460 general: debug 1: zone_settimer: zone ynu.edu.cn/IN/INTRANET: enter</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.460 general: debug 1: zone_gotwritehandle: zone ynu.edu.cn/IN/INTRANET: enter</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.460 general: debug 1: dumptostreaminc(0x7efe0d938010) new nodes -> 212</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.461 general: debug 1: dumptostreaminc(0x7efe0d938010) new nodes -> 310</span> <span class="line" lang="plaintext" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;">14-Dec-2023 14:39:25.464 general: debug 1: dump_done: zone ynu.edu.cn/IN/INTRANET: enter</span></code></pre>
<button type="button" class="btn btn-default btn-md gl-button btn-icon has-tooltip" data-title="复制到剪贴板" data-clipboard-target="pre#code-55" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;border-width:0px;border-style:solid;border-color:#E5E7EB;font-family:inherit;font-size:unset;line-height:unset;margin:0px;appearance:button;background-image:unset;background-position:unset;background-size:unset;background-repeat:unset;background-attachment:unset;background-origin:unset;background-clip:unset;cursor:pointer;padding:0px;height:auto;display:unset;border-radius:unset;text-align:unset;user-select:none;"></button>
</div>
<p data-sourcepos="84:1-84:171" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
I can confirm that I did not use or configure master/slave mode of bind9.
</p>
<p data-sourcepos="86:1-86:54" dir="auto" style="--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;background-color:#FFFFFF;">
<span style="font-family:'-apple-system, BlinkMacSystemFont, PingFang SC, Microsoft YaHei';"><span style="font-size:14.6667px;text-wrap:nowrap;">I found this zone file got updated in about 15 minutes when I made changes or restarted named, and this behavior seems match the docs bind9.readthedocs.io/en/latest/chapter6.html#dynamic-update, but I can confirm I DO NOT configure allow-update or update-policy. I even add "</span></span><span style="font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";font-size:14.6667px;text-wrap:nowrap;">allow-update {none;}; // no DDNS by default" in the zone block of the problematic view</span><span style="font-family:'-apple-system, BlinkMacSystemFont, PingFang SC, Microsoft YaHei';"><span style="font-size:14.6667px;text-wrap:nowrap;">. Is there any chances this configuration comes from other config file or named build options?</span></span><br>
</p>
<p data-sourcepos="86:1-86:54" dir="auto" style="font-size:14.6667px;--tw-shadow:0 0 #0000;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(66, 153, 225, 0.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;font-family:-apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei";text-wrap:wrap;background-color:#FFFFFF;">
I also have posted on <a href="https://stackoverflow.com/questions/77658310/zone-file-got-updated-via-named-process-unexpected" target="_blank">stackoverflow</a>, but without any response.
</p>
</div>
</div>
</blockquote></div>